Lucene search
+L

6 matches found

SUSE CVE
SUSE CVE
added 2026/07/30 4:36 p.m.10 views

SUSE CVE-2026-59251

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

8.6CVSS5.6AI score0.00319EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/27 3:30 p.m.20 views

CVE-2026-59251

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

8.7CVSS6AI score0.00319EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2026/07/27 3:30 p.m.12 views

CVE-2026-59251

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

8.7CVSS6AI score0.00319EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/27 3:30 p.m.37 views

CVE-2026-59251 Denial of service via exponential certificate policy tree growth in path validation

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

8.7CVSS0.00319EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/27 3:30 p.m.57 views

CVE-2026-59251

Summary: CVE-2026-59251 is a denial-of-service in Erlang/OTP public_key certificate path validation caused by unbounded growth of the certificate policy tree during RFC 5280 policy processing. The vulnerability occurs when validating TLS certificates; a chain with many policies per certificate ca...

8.7CVSS6AI score0.00319EPSS
SaveExploits0References6Affected Software2
FreeBSD
FreeBSD
added 2026/07/27 12:00 a.m.8 views

Erlang/OTP -- denial of service via exponential certificate policy tree growth

https://github.com/erlang/otp/security/advisories/GHSA-622p-qfh6-c352 reports: A remote attacker can trigger a denial of service through TLS certificate handling. By sending a specially crafted certificate chain with multiple certificate policies at each level, the policy tree expands exponential...

8.7CVSS5.9AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder